OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

nodejs cli npm security typescript sdk cybersecurity openai application-security codex devsecops vulnerability-scanning code-scanning ai-security codex-security

• Updated Nov 12, 2026
• TypeScript

Advanced vulnerability scanning with Nmap NSE

security security-audit lua exploit lua-script nmap penetration-testing vulnerability vulnerability-databases vulnerability-detection nse vulnerability-identification vulnerability-scanners security-scanner vulnerability-assessment nmap-scripts nsescript nmap-scan-script vulnerability-scanning vulnerability-database-entry

• Updated Feb 6, 2026
• Lua

本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。

security auditing security-audit security-tools vulnerability-scanning security-scanning

• Updated Aug 7, 2022
• Python

A fast tool to scan CRLF vulnerability written in Go

go golang vulnerability-scanning vulnerability-scanner crlf-injection

• Updated Nov 9, 2026
• Go

80k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒

wordpress security scanner cybersecurity exploits vulnerability awesome-list pentesting nuclei bugbounty cve hacker vulnerability-management ethical-hacking vulnerability-scanning wordfence nuclei-templates projectdiscovery nuclei-scan

• Updated Nov 11, 2026
• Python

Work in progress...

security osint web enumeration penetration-testing bug-bounty exploitation offensive-security ethical-hacking web-penetration-testing vulnerability-scanning reconnaissance red-team-engagement open-source-intelligence

• Updated Apr 29, 2026
• PHP

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

security static-code-analysis penetration-testing dynamic-analysis application-security wordpress-security mobile-security vulnerability-management vulnerability-scanners security-scanner vulnerability-assessment network-security webappsec vulnerability-scanning source-code-analysis penetration-testing-framework security-vulnerability-assessment

• Updated Mar 18, 2024
• Java

vulscan 扫描系统：最新的poc&exp漏洞扫描，redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...

poc vulnerability vulnerability-databases exploitation-framework vulnerability-scanners security-tools vulnerability-scanning vulnerability-database-entry webscanner scanner-web webscan vulscan pocscanner pocscan exploit-databa sesecurity-vulnerability

• Updated May 10, 2019
• Python

Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.

security exploit reverse-engineering active-directory solidity bug-bounty nuclei web3 cve pentest offensive-security payloads red-team security-tools vulnerability-scanning reconnaissance blue-team defensive-security llm mcp-server

• Updated Nov 4, 2026
• TypeScript

OWASP VulnerableApp Project: Break it. Scan it. Reproduce it. Benchmark against it. Improve it.

javascript css java benchmark spring-boot owasp vulnerability appsec hacktoberfest owasp-zap burpsuite vulnerable-application vulnerability-scanning zaproxy payload-testing learn-security test-vulnerability-scanning-tools practice-hacking

• Updated Nov 12, 2026
• Java

Autonomous agentic AI for CRA (Cyber Resilience Act) compliance: scans repos, triages findings, opens Jira tickets, and auto-fixes vulnerabilities via PR.

security compliance devsecops vulnerability-scanning cra ai-agent

• Updated Aug 15, 2026
• Python

A compilation of resources in the software supply chain security domain, with emphasis on open source

static-analysis awesome-list security-vulnerability dependencies vulnerability-management software-supply-chain cve-scanning attestation package-management reproducible-builds devsecops software-composition-analysis vulnerability-scanning dependency-management oss-compliance sbom supply-chain-security supply-chain-attacks software-supply-chain-security

• Updated Jun 7, 2026

A PHP dependency vulnerabilities scanner based on the Security Advisories Database.

php security security-scanner vulnerability-scanning vulnerability-scanner

• Updated Dec 16, 2023
• PHP

Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration

python security devops security-audit salt saltstack devops-tools vulnerability-scanners security-scanner security-tools vulnerability-scanning

• Updated Oct 18, 2017
• Python

Greenbone Vulnerability Management Docker Image with OpenVAS

docker open-source docker-container docker-image architecture postgresql cybersecurity vulnerability vulnerabilities scanning openvas vulnerability-management cyber-security vulnerability-scanners gvm vulnerability-scanning greenbone greenbone-vulnerability-manager nvts greenbone-vulnerability-management

• Updated Nov 25, 2024
• XSLT

Security operations toolkit for AI coding agents. Give Claude Code 25+ skills to catch vulnerabilities, scan containers, detect secrets, and enforce policies automatically.

security appsec agents security-automation security-tools devsecops ai-agents vulnerability-scanning sast dast shift-left anthropic llm-tools claude-code

• Updated Apr 15, 2026
• Python

Nmap script that scans for probable vulnerabilities based on services discovered in open ports.

security security-audit exploit nmap penetration-testing vulnerability vulnerability-databases vulnerability-detection nse vulnerability-identification vulnerability-scanners security-scanner metasploit nmap-scripts nsescript nmap-scan-script vulnerability-scanning exploit-db nmap-script nmap-scan

• Updated Mar 16, 2025
• Lua

A VS Code Extension for Trivy

vscode-extension vulnerability-scanning

• Updated Jun 29, 2026
• TypeScript

PatrowlHears - Vulnerability Intelligence Center / Exploits

api automation threat secops cybersecurity exploits threat-hunting vulnerabilities threatintel cve cpe vulnerability-detection soc vulnerability-identification cvss threat-intelligence vulnerability-scanning patrowl exploits-scripts vulnerability-intelligence

• Updated Oct 26, 2026
• Python

Security proxy for AI agents. Scans every message for prompt injection, PII, and secrets. Defense-in-depth: Go proxy + iptables firewall + eBPF kernel monitor. YAML policy engine, audit logging, 5 AI agents with RAG knowledge bases.

go reverse-proxy ebpf ai-agents vulnerability-scanning ai-security audit-logging defense-in-depth pii-detection prompt-injection llm-security security-proxy openclaw

• Updated Mar 26, 2026
• Go